CVE-2005-1264

Linux kernel 2.6.x - Use After Free

Title source: llm

Description

Raw character devices (raw.c) in the Linux kernel 2.6.x call the wrong function before passing an ioctl to the block device, which crosses security boundaries by making kernel address space accessible from user space, a similar vulnerability to CVE-2005-1589.

References (9)

[Exploit, Patch, Vendor Advisory] http://archives.neohapsis.com/archives/vulnwatch/2005-q2/0045.html

[Third Party Advisory] http://archives.neohapsis.com/archives/vulnwatch/2005-q2/0046.html

[Various Sources] http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.11.10

[Mailing List] http://marc.info/?l=linux-kernel&m=111630512512222

[Vendor Advisory] http://www.redhat.com/support/errata/RHSA-2005-420.html

[Third Party Advisory, VDB Entry] https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10264

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/427980/100/0/threaded

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/13651

[Third Party Advisory] http://www.vupen.com/english/advisories/2005/0557

Scores

EPSS 0.0005

EPSS Percentile 16.1%

Classification

Status draft

Affected Products (29)

linux/linux_kernel

linux/linux_kernel

linux/linux_kernel

linux/linux_kernel

linux/linux_kernel

linux/linux_kernel

linux/linux_kernel

linux/linux_kernel

linux/linux_kernel

linux/linux_kernel

linux/linux_kernel

linux/linux_kernel

linux/linux_kernel

linux/linux_kernel

linux/linux_kernel

... and 14 more

Timeline

Published May 17, 2005

Tracked Since Feb 18, 2026